Comments on: Identity Theft Attacks http://www.gnucitizen.org/blog/identity-theft-attacks/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Abhinav Vaid http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-126450 Abhinav Vaid Sat, 04 Apr 2009 18:55:52 +0000 https://www.gnucitizen.org/?p=2507#comment-126450 As a rule of thumb, I think one should should never ever disclose any personal information over the phone irrespective of what the caller says/claims. The only exception could be if you've identified the no (caller id), & hence know the caller. Although giving ssn's or credit card numbers (especially the later one is like giving a blank cheque to a professional cheat. As a rule of thumb, I think one should should never ever disclose any personal information over the phone irrespective of what the caller says/claims. The only exception could be if you’ve identified the no (caller id), & hence know the caller.

Although giving ssn’s or credit card numbers (especially the later one is like giving a blank cheque to a professional cheat.

]]> By: pagvac http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-126071 pagvac Sun, 22 Feb 2009 16:41:28 +0000 https://www.gnucitizen.org/?p=2507#comment-126071 sometimes credit card DBs get compromised, but the PANs are split across different DBs as a defense in depth mechanism. This is why in some carding forums you can only buy partial credit card #s. The reason why scammers buy them is because it allows them to perform targeted attacks where the victim feels the attacker is a legitimate entity because some info is previously known (even if that info is not complete). Think of customized phishing over email and phone. sometimes credit card DBs get compromised, but the PANs are split across different DBs as a defense in depth mechanism. This is why in some carding forums you can only buy partial credit card #s. The reason why scammers buy them is because it allows them to perform targeted attacks where the victim feels the attacker is a legitimate entity because some info is previously known (even if that info is not complete). Think of customized phishing over email and phone.

]]> By: Hugh http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125964 Hugh Sat, 14 Feb 2009 06:10:24 +0000 https://www.gnucitizen.org/?p=2507#comment-125964 I concur that problem is in the process, but perhaps the best defense is to avoid the temptation of giving personal information on the phone unless you can verify the ligitimacy of the person at the other end I concur that problem is in the process, but perhaps the best defense is to avoid the temptation of giving personal information on the phone unless you can verify the ligitimacy of the person at the other end

]]> By: Shoaib Yousuf http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125915 Shoaib Yousuf Tue, 10 Feb 2009 22:47:22 +0000 https://www.gnucitizen.org/?p=2507#comment-125915 Recently i was investigating a case, in which scammer sent out a Paypal phishing email to a user, user was fooled and he gave out all his details except his credit card numbers. Scammer rang the user as he got all the details from the phishing email, pretending a call from Paypal. He mentioned, we sent out you an email but unfortunately you didn't provide a valid credit card number, user thought this is legitmate call and he gave his credit card details. After one month, he noticed 3k fraudulent charges on this credit card plus he lost his identity. Shoaib Recently i was investigating a case, in which scammer sent out a Paypal phishing email to a user, user was fooled and he gave out all his details except his credit card numbers. Scammer rang the user as he got all the details from the phishing email, pretending a call from Paypal. He mentioned, we sent out you an email but unfortunately you didn’t provide a valid credit card number, user thought this is legitmate call and he gave his credit card details.

After one month, he noticed 3k fraudulent charges on this credit card plus he lost his identity.

Shoaib

]]> By: TroyC http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125914 TroyC Tue, 10 Feb 2009 21:37:44 +0000 https://www.gnucitizen.org/?p=2507#comment-125914 Perhaps ask the caller to send a digitally signed email. Another option could be to provide you with a piece of your information that noone else would know. A simple right or wrong scenario. The caller would ask is your first three SSNs are ###? If they are not, hang up. If they are, proceed. Personally I like the digitally signed email better. Perhaps ask the caller to send a digitally signed email. Another option could be to provide you with a piece of your information that noone else would know. A simple right or wrong scenario. The caller would ask is your first three SSNs are ###? If they are not, hang up. If they are, proceed. Personally I like the digitally signed email better.

]]> By: pdp http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125913 pdp Tue, 10 Feb 2009 21:30:24 +0000 https://www.gnucitizen.org/?p=2507#comment-125913 absolutely! absolutely!

]]> By: David Kierznowski http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125910 David Kierznowski Tue, 10 Feb 2009 17:24:24 +0000 https://www.gnucitizen.org/?p=2507#comment-125910 There is a currently a targetted scam in UK where the chaps phoning you already have your address and part of your bank details. Its so much easier to fall into this trap if the guys on the phone already know a fair bit about you before you even start the conversation. There is a currently a targetted scam in UK where the chaps phoning you already have your address and part of your bank details.

Its so much easier to fall into this trap if the guys on the phone already know a fair bit about you before you even start the conversation.

]]> By: Identity Theft Attacks | GNUCITIZEN | identitythefthelp.info http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125874 Identity Theft Attacks | GNUCITIZEN | identitythefthelp.info Sun, 08 Feb 2009 16:37:51 +0000 https://www.gnucitizen.org/?p=2507#comment-125874 [...] Identity Theft Attacks | GNUCITIZENSHARETHIS.addEntry({ title: "Identity Theft Attacks | GNUCITIZEN", url: "http://www.identitythefthelp.info/articles-concerning-identity-theft/identity-theft-attacks-gnucitizen/52" }); [...] [...] Identity Theft Attacks | GNUCITIZENSHARETHIS.addEntry({ title: “Identity Theft Attacks | GNUCITIZEN”, url: “http://www.identitythefthelp.info/articles-concerning-identity-theft/identity-theft-attacks-gnucitizen/52″ }); [...]

]]> By: Identity Theft Attacks | GNUCITIZEN | Identity Theft Facts and Figures http://www.gnucitizen.org/blog/identity-theft-attacks/comment-page-1/#comment-125866 Identity Theft Attacks | GNUCITIZEN | Identity Theft Facts and Figures Sat, 07 Feb 2009 19:28:30 +0000 https://www.gnucitizen.org/?p=2507#comment-125866 [...] Identity Theft Attacks | GNUCITIZENSHARETHIS.addEntry({ title: "Identity Theft Attacks | GNUCITIZEN", url: "http://www.identitytheftfactsandfigures.info/2009/02/07/identity-theft-attacks-gnucitizen/" }); [...] [...] Identity Theft Attacks | GNUCITIZENSHARETHIS.addEntry({ title: “Identity Theft Attacks | GNUCITIZEN”, url: “http://www.identitytheftfactsandfigures.info/2009/02/07/identity-theft-attacks-gnucitizen/” }); [...]

]]>